x86/hvm: convert access check for nested HVM to XSM
authorDaniel De Graaf <dgdegra@tycho.nsa.gov>
Tue, 23 Apr 2013 09:54:01 +0000 (11:54 +0200)
committerJan Beulich <jbeulich@suse.com>
Tue, 23 Apr 2013 09:54:01 +0000 (11:54 +0200)
commit4bc22a50ebc1fb1695d59f69105797e208021edb
tree6f01eb36d8f62b7f1d203c4e6bbd8067338a540d
parentbb812101db5117e07de1b557b355c3855850cc95
x86/hvm: convert access check for nested HVM to XSM

This adds an XSM hook for enabling nested HVM support, replacing an
IS_PRIV check.  This hook is a partial duplicate with the xsm_hvm_param
hook, but using the existing hook would require adding the index to the
hook and would require the use of a custom hook for the xsm-disabled
case (using XSM_OTHER, which is less immediately readable) - whereas
adding a new hook retains the clarity of the existing code.

Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Acked-by: George Dunlap <george.dunlap@eu.citrix.com> (release perspective)
tools/flask/policy/policy/modules/xen/xen.if
xen/arch/x86/hvm/hvm.c
xen/include/xsm/dummy.h
xen/include/xsm/xsm.h
xen/xsm/dummy.c
xen/xsm/flask/hooks.c
xen/xsm/flask/policy/access_vectors